PT-2024-12134 · Unknown · Wpeverest User Registration

Name of the Vulnerable Software and Affected Versions: WPEverest User Registration versions through 2.3.2.1 Description: The issue is related to Deserialization of Untrusted Data, which affects the user registration process. Recommendations: For versions through 2.3.2.1, update to a version later...

CVE-2021-47139

A flaw was found in the Linux Kernel's netdevice, which is registered before client initializing is complete. If a window of time between netdevice is available and usable, and a user tries to change the channel number or ring param, it may cause the hns3setrxcpurmap to be called twice...

CVE-2021-47139

In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling registernetdev until client initialize complete Currently, the netdevice is registered before client initializing complete. So there is a timewindow between netdevice available and usable. In this case,...

CVE-2021-47139

CVE-2021-47139 affects the Linux kernel hns3 driver. A race occurs because the netdevice is registered before client initialization completes, creating a window where changes to channels or rx CPU map can trigger hns3_set_rx_cpu_rmap() twice, leading to a crash (BUG at lib/cpu_rmap.c). The fix, a...

CVE-2021-47139 net: hns3: put off calling register_netdev() until client initialize complete

In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling registernetdev until client initialize complete Currently, the netdevice is registered before client initializing complete. So there is a timewindow between netdevice available and usable. In this case,...

Paid Memberships Pro < 3.0 - Cross-Site Request Forgery

Description The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing nonce validation on the pmproliftersavestreamlineoption...

CVE-2024-2726

Stored Cross-Site Scripting Stored-XSS vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration...

CVE-2024-2726 Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

Stored Cross-Site Scripting Stored-XSS vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration...

CVE-2024-2780

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be initiated...

CVE-2024-2780 Campcodes Online Marriage Registration System admin-profile.php cross site scripting

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be initiated...

CVE-2024-2780

CVE-2024-2780 affects Campcodes Online Marriage Registration System 1.0. A cross-site scripting flaw exists in the admin-profile.php file via the adminname parameter, exploitable remotely. Public disclosure is noted. Red Hat and other sources corroborate the same issue. The root cause is input ha...

CVE-2024-2780 Campcodes Online Marriage Registration System admin-profile.php cross site scripting

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be initiated...

CVE-2024-2779

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/application-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. It is possible t...

CVE-2024-2779

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/application-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. It is possible t...

CVE-2024-2778

A vulnerability was found in Campcodes Online Marriage Registration System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched...

CVE-2024-2779

Campcodes Online Marriage Registration System 1.0 is affected by a cross-site scripting (XSS) issue in the /admin/application-bwdates-reports-details.php file, caused by manipulation of the fromdate parameter. Exploitation is possible remotely and the exploit has been disclosed publicly. Several ...

CVE-2024-2779 Campcodes Online Marriage Registration System application-bwdates-reports-details.php cross site scripting

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/application-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. It is possible t...

CVE-2024-2779 Campcodes Online Marriage Registration System application-bwdates-reports-details.php cross site scripting

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/application-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. It is possible t...

CVE-2024-2778

CVE-2024-2778 affects Campcodes Online Marriage Registration System 1.0, specifically the /admin/search.php endpoint. The vulnerability arises from unsanitized input in the searchdata parameter, enabling cross-site scripting (XSS). Exploitation may be performed remotely and the exploit has been d...

CVE-2024-2778 Campcodes Online Marriage Registration System search.php cross site scripting

A vulnerability was found in Campcodes Online Marriage Registration System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched...